Uncategorized

Brits must prove their age on adult sites by July, says watchdog 2025-01-16 at 15:19 By Richard Speed Regulator asks people to link their credit cards, mobile accounts or face scans to smut use, to protect kids The UK’s communications regulator has published guidance for website operators aimed at preventing under-18s from accessing pornographic content […]

Ready to Simplify Trust Management? Join Free Webinar to See DigiCert ONE in Action 2025-01-16 at 15:18 By The digital world is exploding. IoT devices are multiplying like rabbits, certificates are piling up faster than you can count, and compliance requirements are tightening by the day. Keeping up with it all can feel like trying

Debian 12.9 arrives, quickly followed by MX Linux 23.5 2025-01-16 at 14:48 By Liam Proven The eighth point-release of Bookworm – yes, you read that right – and the latest MX with new Xfce Debian 12.9 – the latest point-release of Debian “Bookworm” – emerged at the weekend and coming hot on its heels is

Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions 2025-01-16 at 14:30 By Cybersecurity researchers have found that the Microsoft Active Directory Group Policy that’s designed to disable NT LAN Manager (NTLM) v1 can be trivially bypassed by a misconfiguration. “A simple misconfiguration in on-premise applications can override the Group Policy, effectively negating the Group

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits 2025-01-16 at 14:30 By Details have emerged about a now-patched security vulnerability that could allow a bypass of the Secure Boot mechanism in Unified Extensible Firmware Interface (UEFI) systems. The vulnerability, assigned the CVE identifier CVE-2024-7344 (CVSS score: 6.7), resides in a UEFI

The $10 Cyber Threat Responsible for the Biggest Breaches of 2024 2025-01-16 at 14:30 By You can tell the story of the current state of stolen credential-based attacks in three numbers: Stolen credentials were the #1 attacker action in 2023/24, and the breach vector for 80% of web app attacks. (Source: Verizon). Cybersecurity budgets grew

Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer 2025-01-16 at 14:30 By Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campaigns. “In both campaigns, attackers hid malicious code in images they uploaded to archive[.]org, a

Blue Origin reaches orbit with New Glenn, fumbles first-stage recovery 2025-01-16 at 13:48 By Richard Speed Jeff Bezos’ space company achieves milestone with payload delivered Jeff Bezos joined the orbital elite with the launch of Blue Origin’s New Glenn rocket this morning.… This article is an excerpt from The Register View Original Source

Infoseccer: Private security biz let guard down, exposed 120K+ files 2025-01-16 at 12:49 By Connor Jones Assist Security’s client list includes fashion icons, critical infrastructure orgs A London-based private security company allegedly left more than 120,000 files available online via an unsecured server, an infoseccer told The Register.… This article is an excerpt from The

Apple’s interoperability efforts aren’t meeting spirit or letter of EU law, advocacy groups argue 2025-01-16 at 11:49 By Thomas Claburn Free Software Foundation Europe and others urge European Commission to double down on DMA Digital rights advocacy organizations contend that Apple has failed to comply with its interoperability obligations under the EU’s Digital Markets Act

Biden Administration proposes framework for AI chip exports 2025-01-16 at 11:09 By The Biden Administration has proposed a framework for AI chip exports, and security leaders are sharing their thoughts.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

UK government tech procurement lacks understanding, says watchdog 2025-01-16 at 10:36 By Lindsay Clark NAO report highlights £3B cost overruns and 29 years of cumulative delays in IT projects UK government plans its technology purchases with limited assessment of technical feasibility, according to a spending watchdog’s analysis of the £14-billion-a-year procurement of digital services.… This

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager 2025-01-16 at 09:48 By Ivanti has rolled out security updates to address several security flaws impacting Avalanche, Application Control Engine, and Endpoint Manager (EPM), including four critical bugs that could lead to information disclosure. All the four critical security flaws, rated 9.8 out of

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws 2025-01-16 at 09:48 By Cybersecurity researchers have detailed an attack that involved a threat actor utilizing a Python-based backdoor to maintain persistent access to compromised endpoints and then leveraged this access to deploy the RansomHub ransomware throughout the target network. According to GuidePoint Security, initial access

India becomes just fourth country to dock satellites in orbit 2025-01-16 at 09:33 By Simon Sharwood As the ESA celebrates planned break-up of its solar blotter-spotter India’s Space Research Organisation (ISRO) has successfully docked a pair of satellites, making the nation the fourth to achieve the feat.… This article is an excerpt from The Register

US adds Chinese RISC-V player that TSMC suspected of helping build Huawei GPUs to risky company register 2025-01-16 at 08:19 By Simon Sharwood Sophgo scores a place on Entity List, Indian nuclear boffins taken off Chinese chip designer Sophgo, a suspected supplier of AI silicon to Huawei, has been added to the USA’s “Entity List”

Prepping for your January 2025 board meeting 2025-01-16 at 07:19 By The first board meeting of the New Year presents opportunities to effectively communicate the state of the organization’s cybersecurity posture. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Parallels brings back the magic that was waiting seven minutes for Windows to boot 2025-01-16 at 03:47 By Simon Sharwood In a preview of x86_64 VMs running on Apple silicon, so it’s excusable for now Desktop hypervisor specialist Parallels has released an early technology preview of code that allows virtual machines running OSes coded for